Skip to main content

clawsec-scanner

Automates vulnerability scanning for agent platforms, integrating dependency checks, SAST, and DAST for comprehensive security assessments.

Install this skill

or
47/100

Security score

The clawsec-scanner skill was audited on Jun 11, 2026 and we found 13 security issues across 2 threat categories, including 2 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 295

Direct command execution function call

SourceSKILL.md
295const proc = spawn('npm', ['audit', '--json'], {
high line 415

Direct command execution function call

SourceSKILL.md
415const proc = spawn('semgrep', [
medium line 129

Template literal with variable interpolation in command context

SourceSKILL.md
129```bash
medium line 196

Template literal with variable interpolation in command context

SourceSKILL.md
196```bash
medium line 219

Template literal with variable interpolation in command context

SourceSKILL.md
219```bash
low line 292

Node child_process module reference

SourceSKILL.md
292import { spawn } from 'node:child_process';
low line 5

External URL reference

SourceSKILL.md
5homepage: https://clawsec.prompt.security
low line 499

External URL reference

SourceSKILL.md
499- **ClawSec Homepage**: https://clawsec.prompt.security
low line 500

External URL reference

SourceSKILL.md
500- **Documentation**: https://clawsec.prompt.security/scanner
low line 502

External URL reference

SourceSKILL.md
502- **OSV API Docs**: https://osv.dev/docs/
low line 503

External URL reference

SourceSKILL.md
503- **NVD API Docs**: https://nvd.nist.gov/developers/vulnerabilities
low line 504

External URL reference

SourceSKILL.md
504- **Semgrep Registry**: https://semgrep.dev/explore
low line 505

External URL reference

SourceSKILL.md
505- **Bandit Documentation**: https://bandit.readthedocs.io/
Scanned on Jun 11, 2026
View Security Dashboard
Installation guide →